If I use software and there's a bug, I don't want to find out years later when the author decided to admit it, I want to find out right away so I can get it pat

If I use software and there's a bug, I don't want to find out years later when the author decided to admit it, I want to find out right away so I can get it patched. Papers are equivalent to code, if I'm developing something based on one I want to know if the foundation is reliable or not. > what if private disclosure was expected to backfire? Well of course it could be expected to go badly. Look at all the "concern" spent over their methods already. But yes, it would have been interesting if they had contacted authors quietly and without telling them their methods, simply to see who updated their paper and who tried to blame the messenger... Then publish that list and let the field really correct itself.